Privacy Policy

Your privacy is important to us. It is NextBento's policy to respect your privacy regarding any information we may collect from you across our website, https://www.nextbento.dev, and other sites we own and operate.

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we're collecting it and how it will be used.

This Privacy Policy was last updated on August 22, 2026.

1. Who We Are and How to Contact Us

For the purposes of applicable data protection laws (including the EU General Data Protection Regulation, "GDPR"), the data controller of your personal data is:

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the details above.

2. Scope

This Privacy Policy applies to the NextBento website and any related services provided by Szara Sowa Software Development - Władysław Kłaczkow, including the purchase and delivery of the NextBento product.

3. Third-Party Links

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

4. Data We Collect

We collect personal information only when necessary to provide a service to you. This includes:

• Technical and usage data: When you visit our website, we may collect limited technical information automatically (such as IP address, browser type, device information, and pages visited) to operate, secure, and maintain our services. This data is collected via server logs from our hosting provider.
• Payment data: When you purchase NextBento, payment information is processed by Stripe. We do not store payment card data. Stripe collects and processes payment details in accordance with their privacy policy.
• Contact data: When you contact us directly (for example, by email for setup inquiries or support), we collect the information you provide (such as email address and name) to respond to your request.
• Account and delivery data: When you purchase NextBento, we may collect your email address and, if applicable, GitHub username or account information to provide access to the product.

5. How We Use Your Data

We use the data we collect to:

• Provide, operate, and maintain our website and services
• Process payments and fulfill purchases of NextBento
• Grant access to the NextBento product (for example, via GitHub)
• Respond to your inquiries and provide support
• Improve the security, stability, and performance of our website
• Comply with legal obligations (for example, tax and accounting records)

We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we'll protect within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.

6. Legal Bases for Processing (GDPR)

When we process personal data of individuals in the European Economic Area (EEA) or the United Kingdom, we rely on one or more of the following legal bases:

• Contract (Art. 6(1)(b) GDPR): Providing access to our website, processing payments, fulfilling purchases, and granting access to the NextBento product.
• Legitimate interests (Art. 6(1)(f) GDPR): Responding to contact inquiries, maintaining and improving the security and performance of our website (including basic technical logs), and producing aggregated statistics that do not identify you.
• Legal obligation (Art. 6(1)(c) GDPR): Keeping payment and invoicing records for tax and accounting purposes.
• Consent (Art. 6(1)(a) GDPR): Where we use non-essential cookies or analytics tools, or send marketing communications, we will obtain your consent first.

7. Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies and similar technologies for the following purposes:

• Essential cookies: These cookies are necessary to provide the service, for example to maintain your session and protect against unauthorized access. Without them, core features of the site would not function properly.
• Analytics cookies: If we use analytics tools (such as Vercel Analytics), these cookies help us understand how visitors use our website. Non-essential analytics cookies are only used after you have given your consent, where required by law.

You can manage or withdraw your consent for non-essential cookies at any time using your browser settings. Disabling certain cookies may affect the functionality of some features.

8. Data Storage

Our website is hosted on Vercel. Server logs and technical data may be stored and processed by Vercel to the extent necessary to provide, secure, and maintain our services. Payment data is processed by Stripe and is not stored by us.

9. Third Parties

We use third-party services, including:

• Stripe: Payment processing. Stripe collects and processes payment information in accordance with their privacy policy. We do not store payment card data.
• Vercel: Hosting and infrastructure. Vercel may collect technical data (such as IP address, request logs) as part of providing hosting services.
• GitHub: Product delivery. If your purchase includes access to a private repository, GitHub will process your account information in accordance with their privacy policy.
• Resend: Transactional email delivery (for example, purchase confirmation). Resend processes email addresses and message content to send mail on our behalf.
• EventDash: Cookieless product analytics. EventDash does not set cookies. It collects anonymous usage data such as pages viewed and conversion events so we can understand how the site is used. See their privacy policy at eventda.sh/privacy.

These services may collect personal and/or non-personal data as part of providing their services. We ensure that their privacy policies and contractual commitments provide an appropriate level of protection for your personal data and align with applicable data protection laws.

10. Your Rights Under GDPR

If you are an EU resident, you have the right to request access to and deletion of your personal data at any time. Non-EU residents will also be granted these rights where applicable.

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Portability — receive your data in a portable format
• Object to processing based on legitimate interests — we will stop processing unless we demonstrate compelling legitimate grounds
• Withdraw consent at any time (for consent-based processing)

To exercise any right, contact us at wlad@wlad.me or via wlad.me. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). If you are located in another EU Member State, you may also contact your local data protection authority.

11. Data Sharing

We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information with our business partners, trusted affiliates, and advertisers.

We may share your personal data with trusted service providers (data processors) who support us in operating our services (for example, hosting, payments, email). These providers only process your data on our documented instructions and are contractually required to implement appropriate technical and organizational measures to protect your data.

We may also disclose your personal data where required to do so by law or in response to valid requests by public authorities (for example, a court or government agency).

12. International Transfers

We use third-party processors that may involve transferring your personal data outside the European Economic Area. Where we do so, we rely on appropriate safeguards such as adequacy decisions (including the EU-US Data Privacy Framework), Standard Contractual Clauses, or other mechanisms approved by the European Commission to ensure your data continues to receive a level of protection essentially equivalent to that in the EU.

13. Security

We implement appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

While we work hard to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data; however, we review and improve our safeguards on an ongoing basis.

14. Data Breach Notifications

In the event of a personal data breach, we will:

• Notify affected individuals and supervisory authorities without undue delay, and where feasible, within 72 hours of becoming aware of the breach
• Provide information about the nature of the breach, affected data categories, likely consequences, and remedial measures taken
• Document all breaches for regulatory verification

15. Age Restrictions

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal information from children under the age of 16.

If we become aware that we have collected personal data from a child under 16 in violation of this section, we will take reasonable steps to delete such information as soon as possible. If you believe that a child has provided us with personal data, please contact us.

16. External Links

Our website may contain links to external sites that are not operated by us. We have no control over the content and practices of these sites and cannot accept responsibility or liability for their respective privacy policies.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the updated date at the top of this page. We encourage users to frequently check this page for any changes to stay informed.

18. Contact

For any questions or concerns regarding your privacy, you may contact us at wlad@wlad.me or via wlad.me.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information.

Read our Terms of Service for more information.